Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/y4G_f7aIFH9F-lxhjz5lA7v0yos.roa
File: y4G_f7aIFH9F-lxhjz5lA7v0yos.roa (raw, json)
Hash identifier: B/5HPC9rC2KKSDOlId9+qjZU4WSM5nx8mD6PLWGshR8=
Subject key identifier: CB:81:BF:7F:B6:88:14:7F:45:FA:5C:61:8F:3E:65:03:BB:F4:CA:8B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A78BFF0
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/y4G_f7aIFH9F-lxhjz5lA7v0yos.roa
Signing time: Sat 01 Jan 2022 04:51:58 +0000
ROA not before: Sat 01 Jan 2022 04:51:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57480
IP address blocks: 195.136.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980991984 (0x3a78bff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb81bf7fb688147f45fa5c618f3e6503bbf4ca8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:fc:d2:c6:81:01:f0:ff:19:06:ff:f4:c0:
3b:40:26:4d:02:14:47:97:4b:bc:01:5d:62:cf:3b:
4b:61:1a:cc:ee:bd:99:ae:a2:f8:b4:81:94:a2:45:
06:9f:33:92:ed:c7:4d:cb:1c:9f:33:47:3c:cb:61:
b4:f4:e6:1f:3d:a1:07:61:6f:c0:32:30:0b:2a:a9:
81:20:61:df:52:bc:e3:8d:7f:86:2c:d4:fa:08:0f:
f2:c6:bf:cc:7d:4b:0f:73:9f:a7:8d:d2:e2:24:cd:
46:4e:ef:c6:e5:85:90:38:4d:0a:ce:49:8c:88:97:
ba:91:8d:3e:7f:ae:11:98:d2:0c:a5:0d:7f:20:71:
37:ce:f6:d9:f1:bd:8b:ed:6d:3b:c6:00:2c:8a:b9:
ef:19:0c:bf:7d:79:e9:48:91:f5:46:cb:d9:69:19:
14:a2:11:ae:a9:dd:cf:b3:b5:71:42:98:20:07:b2:
c2:82:cf:80:97:09:55:46:58:ab:19:22:54:91:2e:
e4:01:9e:10:53:1b:57:c2:d8:98:f0:82:ff:27:02:
04:39:86:14:b9:82:ea:62:fa:59:97:b7:55:ac:b0:
6a:9a:c5:46:07:a5:b4:1e:66:46:90:9e:70:5b:f5:
bb:12:d8:76:32:89:3f:6e:2b:6d:85:60:37:8a:0e:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:BF:7F:B6:88:14:7F:45:FA:5C:61:8F:3E:65:03:BB:F4:CA:8B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/y4G_f7aIFH9F-lxhjz5lA7v0yos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c3:a7:b4:c0:64:cc:60:70:5c:f5:25:30:12:a1:e8:6d:64:
8c:42:ad:68:bb:47:12:90:03:00:b1:4e:33:84:a5:b7:5c:72:
c8:a7:39:78:79:a7:04:1e:df:9b:15:70:a4:ba:13:78:e2:a9:
4a:aa:cb:50:a5:ae:80:0f:6c:0d:11:09:fb:e0:56:7c:30:66:
fc:f9:60:6c:86:b3:59:7b:5f:d8:fa:5f:7e:ea:20:d1:46:97:
df:87:5a:cf:69:c0:c7:17:b6:09:2d:7b:48:ea:0f:15:86:be:
9d:17:40:80:32:a2:bb:1f:10:d3:21:96:f1:49:0f:09:fc:af:
00:1d:42:88:bb:7c:f0:ed:92:f9:90:b7:1c:84:c5:86:0a:2c:
66:8c:4c:c4:42:20:a7:ed:53:36:89:48:dd:43:01:2a:58:9a:
5d:2d:f7:7b:55:c9:94:11:ae:c2:c8:8a:c3:56:5e:b6:c9:2f:
0d:e0:05:cf:a0:25:24:21:6b:03:32:96:85:0e:8a:19:f4:9f:
f5:03:0d:48:96:8c:3f:86:f3:71:ac:6d:74:8c:d3:f0:4c:49:
be:86:ca:5c:ec:6e:7c:46:d6:26:5f:1d:e1:a0:c1:62:b5:b0:
5d:9c:01:88:01:7e:5c:52:6c:a8:6a:fe:39:e7:ed:87:42:6e:
15:c7:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:00 2025 by rpki-client